Download The Sleuth Kit 4.10.2

The program The Sleuth Kit is a collection of forensic tools that can be used to take a closer look at the hard drive. This makes it possible to recover or partially view deleted files. Support for NTFS, FAT, exFAT, UFS1, UFS2, ext2fs, ext3fs, ext4, HFS, Yaffs2, and ISO 9660 formats is provided. For more information, please refer to this page. The developers released version 4.10.2 and the changelog since then looks like this:

C/C++

• Added support for Ext4 inline data

Java

• New Blackboard Artifacts for ALEAPP/ILEAPP, Yara, Geo Area, etc.
• Upgraded to PostgreSQL JDBC Driver 42.2.18
• Added SHA256 to files table in DB and added utility calculation methods.
• Changed TimelineManager to make events for any artifact with a time stamp
• Added Japanese translations
• Fixed synchronization bug in getUniquePath